[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [suse-security] New logging message

Thanks for the answers so far. So

NOQUEUE: [] did not issue MAIL/EXPN/VRFY/ETRN during connection
to MTA

is nothing to worry about. However I'm very worried about the 

PAM-warn[19900]: user: (uid=0) -> admin [remote: ?nobody@?nowhere]

messages. It looks to me as if someone already has gained root rights
and made an su to "admin" (which should be impossible, because
/etc/passwd as I see it doesn't contain that user). I hope to be misleaded...

Best regards, Matthias

Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here